Organizations
Manage members, access, and security for your organization in Organizations.
Organizations is the Certta admin console for identity and access management. Super Admins use it to configure the organization profile, manage people (members, administrators, roles, and groups), and set up security features such as SSO and SCIM provisioning.
Each organization is accessed at its own subdomain, for example https://certta.sso.caf.io. Members sign in at that URL with Sign in with SSO when SSO is enabled. Super Admins open the admin console at https://certta.sso.caf.io/admin-login using email and password.
Access requirements
Super Admin
Full access to all areas described below.
Member
Can sign in and use linked Certta products according to group assignments. Cannot open the admin console.
Organization subdomain
The hostname alias identifies your tenant (for example, certta in https://certta.sso.caf.io).
Navigation overview
The admin sidebar includes four main areas:
Dashboard
Overview of members, groups, linked accounts, and roles, plus shortcuts to SSO and SCIM.
Organization
Organization status, login URL, identifier, and linked Certta accounts.
People
Members, administrators, roles, and groups.
Security
SSO, attribute mapping, group assignment rules, and SCIM tokens.
Dashboard
The dashboard shows organization-wide counts and the status of SSO and SCIM provisioning.
Members
Total members in the organization.
Groups
Groups used to bundle role and tenant assignments.
Linked accounts
Certta products linked to this organization.
Roles
Custom roles defined for fine-grained permissions.
Use the SSO and SCIM cards to jump directly to the corresponding Security tabs.
Organization
Configure organization-level settings: active status, display name, login URL, organization ID, and linked accounts.
Organization active
When disabled, new logins are blocked; existing data is preserved.
Login URL
URL members use to sign in (subdomain-based).
Organization ID
Internal identifier for APIs and support.
Linked accounts
Certta products connected to this organization.
People
The People screen has four tabs: Members, Administrators, Roles, and Groups.
Members
View and manage organization members. Search and filter by status, and deactivate accounts.
Administrators
Super Admins who can manage the organization. View the list of administrators with access to the admin console.
Roles
Define named sets of scopes (permissions). Roles are attached to groups; members inherit access through group membership.
Role
Display name of the custom role.
Description
Optional summary of the role purpose.
Permissions
Count of scopes assigned to the role.
Groups
Number of groups that reference this role in their access assignments.
Create a role
Open People → Roles.
Select Create role.
Enter a Name and optional Description.
Under Permissions, select one or more scopes (use the filter to search by identifier).
Select Save role.
Groups
Bundle role + tenant assignments and attach members. Groups are the primary unit for access control across linked Certta products.
Name
Group display name.
Description
Optional summary of the group's purpose.
Members
Count of members attached to the group.
Assignments
Count of role + linked-account access rules configured for the group.
Create a group
Open People → Groups.
Select Create group.
Enter a Group name and optional Description.
Select Create Group — you are redirected to the group detail page.
Group detail — Members and Accesses
Each group has two tabs:
Members
View and add organization members to the group.
Accesses
Assign roles to linked accounts (all accounts or specific tenants).
Open the Accesses tab to manage which roles the group grants and on which linked accounts:
Select Add accesses to attach a role:
Choose a Role from the list of roles defined in People → Roles.
Under Where to apply, pick All accounts or Specific accounts.
For specific accounts, select one or more linked accounts from the list.
Select Add accesses.
Create roles and groups before configuring Security → Group assignment rules. SSO rules target existing groups — they do not create groups automatically.
Security
Open Security in the sidebar (labeled Authentication in the page header). Four tabs cover federation and provisioning.
SSO
Enable SAML or OIDC, copy Service Provider values for your identity provider, and save provider configuration.
See the SSO Configuration Guide and provider-specific guides for step-by-step setup.
Attribute mapping
Map identity provider claims to member fields used during SSO sign-in.
Group assignment rules
Assign members to groups automatically based on IdP attributes (for example, directory groups or department).
SCIM
Generate a bearer token and SCIM base URL for automated user provisioning from your identity provider.
See the SCIM Provisioning Guide for setup steps, supported operations, and how SCIM interacts with SSO.
Related documentation
Last updated